MRBS 1.12.2 等保2.0二级整改完整提交

包含：登录失败锁定、90天密码有效期、30分钟会话超时、
强制改密、登录审计日志、屏幕水印、企业背景图、
备案信息固定底部、favicon、JS空集合保护、
会话过期体验优化（403 JSON）、display_errors 关闭、
固定 key 根治 Integrity check failed 等全部改动

注意：config.inc.php/.htaccess/.user.ini 含敏感信息，
通过 .gitignore 排除，勿推送到公开仓库。

functions_global.inc

@@ -0,0 +1,194 @@
+<?php
+declare(strict_types=1);
+
+use MRBS\Mbstring\Mbstring;
+
+// These functions are deliberately in the global namespace so that they
+// can be used in classes.  They are either polyfills for PHP functions
+// that only exist in later versions of PHP, or else emulations of the
+// mb_ string functions that aren't always present.
+
+if (!function_exists('json_validate'))
+{
+  function json_validate(string $json, int $depth = 512, int $flags = 0): bool
+  {
+    json_decode($json, null, $depth, $flags);
+    return json_last_error() === JSON_ERROR_NONE;
+  }
+}
+
+
+// Emulation of mb_ord()
+if (!function_exists('mb_ord'))
+{
+  function mb_ord(string $string, ?string $encoding=null)
+  {
+    return Mbstring::mb_ord($string, $encoding);
+  }
+}
+
+
+// Emulation of mb_regex_encoding()
+if (!function_exists('mb_regex_encoding'))
+{
+  function mb_regex_encoding(?string $encoding=null)
+  {
+    return Mbstring::mb_regex_encoding($encoding);
+  }
+}
+
+
+// Emulation of mb_split()
+if (!function_exists('mb_split'))
+{
+  function mb_split(string $pattern, string $string, int $limit = -1)
+  {
+    return Mbstring::mb_split($pattern, $string, $limit);
+  }
+}
+
+
+// Emulation of mb_stripos()
+if (!function_exists('mb_stripos'))
+{
+  function mb_stripos(string $haystack, string $needle, int $offset=0, ?string $encoding = null)
+  {
+    return Mbstring::mb_stripos($haystack, $needle, $offset, $encoding);
+  }
+}
+
+
+// Emulation of mb_strlen()
+// Use mb_strlen() with '8bit' encoding to get a string's length in bytes
+// because strlen() may have been overloaded by mb_strlen().
+if (!function_exists('mb_strlen'))
+{
+  function mb_strlen(string $string, ?string $encoding=null) : int
+  {
+    return Mbstring::mb_strlen($string, $encoding);
+  }
+}
+
+
+// Emulation of mb_strpos()
+if (!function_exists('mb_strpos'))
+{
+  function mb_strpos(string $haystack, string $needle, int $offset=0, ?string $encoding=null)
+  {
+    return Mbstring::mb_strpos($haystack, $needle, $offset, $encoding);
+  }
+}
+
+
+// Emulation of mb_strripos()
+if (!function_exists('mb_strripos'))
+{
+  function mb_strripos(string $haystack, string $needle, int $offset=0, ?string $encoding=null)
+  {
+    return Mbstring::mb_strripos($haystack, $needle, $offset, $encoding);
+  }
+}
+
+
+// Emulation of mb_strrpos()
+if (!function_exists('mb_strrpos'))
+{
+  function mb_strrpos(string $haystack, string $needle, int $offset=0, ?string $encoding=null)
+  {
+    return Mbstring::mb_strrpos($haystack, $needle, $offset, $encoding);
+  }
+}
+
+
+// Emulation of mb_strtolower()
+if (!function_exists('mb_strtolower'))
+{
+  function mb_strtolower(string $string, ?string $encoding=null) : string
+  {
+    return Mbstring::mb_strtolower($string, $encoding);
+  }
+}
+
+
+// Emulation of mb_strtoupper()
+if (!function_exists('mb_strtoupper'))
+{
+  function mb_strtoupper(string $string, ?string $encoding=null) : string
+  {
+    return Mbstring::mb_strtoupper($string, $encoding);
+  }
+}
+
+
+// Emulation of mb_substr()
+if (!function_exists('mb_substr'))
+{
+  function mb_substr(string $string, int $start, ?int $length = null, ?string $encoding = null): string
+  {
+    return Mbstring::mb_substr($string, $start, $length, $encoding);
+  }
+}
+
+
+// Emulates the PHP 8 function str_contains()
+if (!function_exists('str_contains'))
+{
+  function str_contains(string $haystack, string $needle) : bool
+  {
+    if ($needle === '')
+    {
+      // This is the way the PHP function behaves
+      return true;
+    }
+    else
+    {
+      // This works with multibyte characters because
+      // we are not worried about the actual position.
+      return (strpos($haystack, $needle) !== false);
+    }
+  }
+}
+
+
+// Emulates the PHP 8 function str_starts_with()
+if (!function_exists('str_starts_with'))
+{
+  function str_starts_with(string $haystack, string $needle) : bool
+  {
+    if ($needle === '')
+    {
+      // This is the way the PHP function behaves
+      return true;
+    }
+    else
+    {
+      // This works with multibyte characters because
+      // we are looking for position zero.
+      return (strpos($haystack, $needle) === 0);
+    }
+  }
+}
+
+
+// Emulates the PHP 8 function str_ends_with()
+if (!function_exists('str_ends_with'))
+{
+  function str_ends_with(string $haystack, string $needle) : bool
+  {
+    if ($needle === '')
+    {
+      // This is the way the PHP function behaves
+      return true;
+    }
+    else
+    {
+      $pos = mb_strrpos($haystack, $needle);
+      if ($pos === false)
+      {
+        // The needle doesn't exist at all, so the haystack can't end with it.
+        return false;
+      }
+      return ($pos === (mb_strlen($haystack) - mb_strlen($needle)));
+    }
+  }
+}